Sandeep Singh

Results 151 issues of Sandeep Singh

### Nuclei version: latest ### Steps To Reproduce: ```yaml id: basic-raw-example info: name: Test RAW Template author: pdteam severity: info requests: - raw: - |+ GET ?a=b HTTP/1.1 Host: {{Hostname}}...

Priority: Medium
Type: Bug

### Please describe your feature request: - Support for arbitrary query / parameter fuzzing ### Describe the use case of this feature: Currently nuclei supports pre-defined url fuzzing where one...

Priority: Medium
Type: Enhancement

### Please describe your feature request: As of now, when `nuclei -validate` or `nuclei -t test.yaml -validate` is used, nuclei start to download headless browser in the background even though...

Priority: Medium
Status: Completed
Type: Enhancement

### Please describe your feature request: A GitHub workflow to ensure interactsh server is able to run in different/available environments upon each change in server code.

Priority: Medium
Type: Enhancement

### Please describe your feature request: Interactsh server does support running listener for FTP / SMB / RESPONDER with a self-hosted server that can be documented in the readme or...

Priority: Medium
Type: Maintenance
documentation

We have compiled a collection of XSS templates that include XSS payloads as matchers. However, we have observed that on numerous hosts, the XSS payload is reflected on the endpoint...

Priority: High
false-positive
defcon31

### Nuclei Version: latest ### Template file: vulnerabilities/thinkphp/thinkphp-501-rce.yaml ### Command to reproduce: This will match with any host that have phpinfo content in the response, but not necessarily rce as...

false-positive

**Is your feature request related to a problem? Please describe.** When writing or porting an exploit to nuclei templates, not necessarily we have a real target or can share the...

Priority: Medium
Status: On Hold
Type: Enhancement

### Template for? Similar to [token-spray](https://github.com/projectdiscovery/nuclei-templates/blob/master/token-spray/README.md), that takes `token` value as user input to run against multiple API endpoints to confirm the validity, same can be done for checking **user/email**...

Status: In Progress
new-template

### Template / PR Information SSL Template update as per TLSX integration into nuclei - https://github.com/projectdiscovery/nuclei/pull/2522 ### Template Validation ```console echo wrong.host.badssl.com:443 | ./nuclei -t ./ssl/mismatched-ssl.yaml __ _ ____ __...